Right panel now shows connection+detection status on one line, small
start/stop buttons on one line, event text with the red-note inline, and a
3x3 reverse-chronological gallery of recent confirmed screenshots filling
the rest. Double-clicking a thumbnail opens a full-image overlay. Gallery
items are collected off the UI thread from confirmed updates (deduped by
event id) and each ImageOp is built once and cached. Cross-compiles for
Windows; no new deps.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Field ffmpeg reported 'Option rw_timeout not found' and exited, causing a
reconnect loop. rw_timeout is an avio/protocol option, not an RTSP demuxer
option; the RTSP socket timeout is build-specific (-stimeout / -timeout).
Omit it for portability — a dead TCP connection still ends decode and
triggers reconnect. Keeps transport and low-latency flags.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
The stream worker discarded ffmpeg stderr, so reconnect loops were opaque.
Capture stderr and log it with the RTSP URL/credentials redacted, so the
real cause (auth, timeout, option, URL parse) is diagnosable without
leaking the source address.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
go mod vendor pins onnxruntime_go v1.12.1, Gio and the rest into v2/vendor
so go run/build work without hitting proxy.golang.org (blocked/slow in
China). Verified: CGO_ENABLED=1 go build -mod=vendor ./internal/spike and
GOOS=windows go build -mod=vendor ./internal/ui both pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
v1.31.0 requested ORT_API_VERSION 26 (onnxruntime 1.26); the field DLL is
Python 3.8's onnxruntime 1.19.2 (API 19), so GetApi(26) returned NULL and
init failed. v1.12.1 targets ORT API 19, matching the existing DLL with no
download. Verified: native cgo build of internal/spike compiles ort.go
against v1.12.1; Gio UI still cross-compiles for Windows.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
The controller discarded the wrapped error and showed only a generic
message. Log the actual cause (e.g. onnxruntime version mismatch) to the
console so field startup failures are diagnosable.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Rewrites internal/ui/window.go in Gio, keeping the Window interface
(NewWindow/Run/Present/PresentAlert/ReportIssue) and the pure-Go ViewModel.
Background updates mutate shared state under a lock and Invalidate; the Gio
loop renders the latest frame. Dual tabs, widget.Image for render's RGBA, a
self-drawn confirm dialog and a MessageBeep sound. Drops lxn/walk (and the
TTM_ADDTOOL/comctl class of problems). Verified via GOOS=windows CGO_ENABLED=0
build of the UI packages; full app build needs Windows+CGo for onnxruntime.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adds cmd/gio-spike: a minimal Gio window (dual tabs, an *image.RGBA video
area, start/stop) that avoids the Walk TTM_ADDTOOL/comctl manifest problem
entirely. Verified via GOOS=windows CGO_ENABLED=0 go build (11MB single
exe). Windows visual smoke pending. Existing Walk ui-spike left untouched.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
annotate_frame draws Chinese labels (e.g. '确认摔倒 P-0001') using a CJK
font via Pillow when available (Windows uses Microsoft YaHei), and falls
back to the ASCII cv2 label when Pillow or a CJK font is missing. 86 tests
pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adds _FrameGrabber which decodes in a background thread and keeps only the
newest frame; VideoSource drop_stale (STREAM only) returns the latest frame
so a slow consumer never builds a backlog. app enables it for streams.
REPLAY is unchanged. 82 tests pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adds write_local_event_tuning and a sensitivity group (confirm window,
horizontal angle, require-rapid-drop, require-lower-body) that persists to
the untracked local config and applies next start. 79 tests pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
v1/report.py reads events.jsonl and lists each confirmed event with its
latency (flags the 1-3s target) and screenshot, or reports a clean pass
when empty. Supports T-204 latency records and false-alarm counting.
78 tests pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adds a mid-stream drop recovery test and a pipeline test proving a
disconnected frame yields no events and interrupts a pending suspect
(stream loss never alarms). Live preview and fall detection on the real
Hikvision stream were confirmed on Windows. 74 tests pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
cv2.putText only supports ASCII (Hershey fonts); the middle-dot in the
label rendered as garbage on saved screenshots. screenshot_label builds
an ASCII-only 'ID STATE' string for the annotation; the Qt live-view
label is unchanged. 72 tests pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adds configurable event.require_rapid_drop (default off), require_lower_body
(default off) and horizontal_angle_threshold_degrees (default 45). With the
lenient defaults a sustained horizontal pose alone enters SUSPECT and confirms
after the confirm window, which is now the main false-positive guard; missing
knees/ankles no longer reject the pose. Thresholds flow into config_version.
End-to-end smoke confirms a lying pose; 70 tests pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
PersonAnalysis now carries the policy Evidence; view_model builds a Qt-free
per-person diagnostic line (acc/horiz/ang/rapid/cand/state, or the reject
reason) and VideoView overlays it in a corner. Read-only, no decision change;
locates where a real fall stops. 67 tests pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
ilaandClaude Opus 4.8